System login

[Igor Sovin]

Hi!

I've hp-ux 11i v2, and SSH enabled. (telnet disabled)
My old IP was in /etc/hosts.allow I could log into system. Now I changed my IP, but I still can login.
What else should I do to deny all connections from other IPs, except my old IP?

[Mark Nieuwboer · Accepted solution]

Hi,

With ssh /etc/host.allow is ignored.
also the /var/adm/inetd.sec.

What you can do is make sure only you can login and futher more put the host in
/opt/ssh/etc/ssh_known_hosts
and in $HOME/.ssh/known_hosts

then you have controlled ip-spoofing.

see also the man pages of ssh.

grtz. Mark